Link to home
Start Free TrialLog in
Avatar of Jermzz
Jermzz

asked on

Dual NIC Gateway setup

I'm try to build a WIN2003 server firewall pc. So I loaded it on a old pc that I have and I add two nic. However the I have is the router connected to LAN1 which is the internet and LAN2 runs from the pc into the switch which then branch out to the main server. I setup ip's and such but I can't get it working. Can some one help me help.

Thanks
Jermaine
ASKER CERTIFIED SOLUTION
Avatar of stevenlewis
stevenlewis

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Jermzz
Jermzz

ASKER

I'm currently running windows 2003 server on both Firewall pc and Mainserver, however the firewall server is where I have the dual nic's and the Mainserver is where I have DNS,DHCP and AD running from. Please inform a bit more

Thanks
Jermaine
OK, when  you have a multihomed mahcine (more than one NIC), in a windows system, you can only have one of those NIC's assigned a default gateway. then to route to other networks you have to use the route add command from a prompt
Now I do't know your ip scheme, so I can't tell you what NIC can have the default gateway (the one that connects to the internet is usually the one, in this case your firewall)
and I can't tell you what route add command(s) you need to use
Avatar of Jermzz

ASKER

<INTERNET BRIDGE 192.168.1.254> ----- <Router 192.168.0.1> ------ <Firewall LAN1 192.168.0.2><Firewall LAN2 192.168.0.3>-------<switch>----<server1- I have no internet connection from any pc's connecting to the switch>

This is the setup of my network, please inform me step by step if you don't mind. This is the first time I'm doing something like this. Please let me know if a need to change my IP scheme. Anything that is not to understand would be fine.

Thanks for your continuning help
Jermaine
what OS is server1?
Is it a DC? is this a domain or peer to peer?
do  you have dns server  setup on server1, or on the w2k3 box?

>> <Firewall LAN1 192.168.0.2><Firewall LAN2 192.168.0.3>
I assume this is the firewall server, and these are the two NIC ip's?

these can't be on the same subnet (network)
What are you using for a router?
If I understand corredtly, you want to give internet access to the server1 (and the other pc's attached to the switch)?
If so, this is how I would set it up
router ip 192.168.2.1
Firewall lan1 ip 192.168.2.2
enable ICS on the friewall server (this will set the LAN2 ip to 192.168.0.1
mask 255.255.255.0
It will also set up a dhcp server on LAN2
set the other mahcines to obtain ip automatically (or you can set them all statically
server1 ip 192.168.0.2
mask 255.255.255.0
gateway 192.168.0.1
then depending on wether this is a domain or peer to peer will dictate how we setup dns resolution
Avatar of Jermzz

ASKER

Router IP 192.168.0.1
(running Windows 2003 Server) FIREWALL LAN1-192.168.0.2
(running Windows 2003 Server) FIREWALL LAN2-192.168.0.3, which goes to SWITCH,
(running Windows 2003 Server)SERVER LAN (going to the SWITCH which is also running DHCP,DNS, ACTIVE DIRECTORY and Main Domain Controller.

I understand the information you need but after specificing IP in firewall pc I wondering if I need to specific LAN1 IP to 192.168.0.2 and the Second LAN which goes to the switch 192.168.2.1and then use LAN1 IP 192.168.0.2 for the GATEWAY of the LAN connection. But the everytime I do it gives me a SEGMENT ERROR. Also in my router I added 192.168.2.1 to the route. The router I'm using is the Netgear RP614 and I'm using Netgear switches too. I hope this is more info for you to help me better.

Thanks for all that you are doing for me
Jermaine
You didn't do what I suggested above
I will repeat
set the router ip to 192.168.2.1
Firewall lan1 ip 192.168.2.2
enable ICS on the firewall server (this will set the LAN2 ip to 192.168.0.1
mask 255.255.255.0
automatically)
It will also set up a dhcp server on LAN2
set the other machines to obtain ip automatically (or you can set them all statically)
server1 ip 192.168.0.2
mask 255.255.255.0
gateway 192.168.0.1
Avatar of Jermzz

ASKER

Thanks for your help. Could you help with add Fedora 3 pc to my Domain?
I don't evewn know what a fedora3 is :-)
Fedora 3 is Red Hat's "free" or maybe a better term "open source" distro. Jermzz, just configure the NIC on your fedora box with an IP, mask and DNS.

You may be better served taking this question to the linux threads.
I just read the posts... I kind of have the same question.  My server has 2 nics.  NIC one goes to my internal lan is 172.16.x.x and NIC 2 goes to my Cable modem at 192.168.x.x (IP from wireless cable router DHCP) .

I setup this server as TERMINAL server so that any user can login and download from it.  However, I once they connect, I would like my users to go out to the internet for downloads on NIC 2 only.  

When I setup the gateway it only allows for one.  I get a 50/50 chance of going out to the internet through the cable modem.

I would also like to access my lan from the outside through NIC 2(cable modem).  Is this possible?